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^ Methodology for Designing 
^ Fault-Protection Software 

A document describes a methodol- 
ogy for designing fault-protection (FP) 
software for autonomous spacecraft. 
The methodology embodies and ex- 
tends established engineering practices 
in the technical discipline of Fault De- 
tection, Diagnosis, Mitigation, and Re- 
covery; and has been successfully im- 
plemented in the Deep Impact 
Spacecraft, a NASA Discovery mission. 
Based on established concepts of Fault 
Monitors and Responses, this FP 
methodology extends the notion of 
Opinion, Symptom, Alarm (aka Fault), 
and Response with numerous new no- 
tions, sub-notions, software constructs, 
and logic and timing gates. For exam- 
ple, Monitor generates a RawOpinion, 
which graduates into Opinion, catego- 
rized into no-opinion, acceptable, or 
unacceptable opinion. RaiseSymptom, 
ForceSymptom, and ClearSymptom 
govern the establishment and then 
mapping to an Alarm (aka Fault). 
Local Response is distinguished from 
FP System Response. A 1-to-w and re-to- 
1 mapping is established among Moni- 
tors, Symptoms, and Responses. Re- 
sponses are categorized by device 
versus by function. Responses operate 
in tiers, where the early tiers attempt to 
resolve the Fault in a localized step-by- 
step fashion, relegating more system- 
level response to later tier(s). Recovery 
actions are gated by epoch recovery 
timing, enabling strategy, urgency, 
MaxRetry gate, hardware availability, 
hazardous versus ordinary fault, and 


many other priority gates. This 
methodology is systematic, logical, and 
uses multiple linked tables, parameter 
files, and recovery command se- 
quences. The credibility of the FP de- 
sign is proven via a fault-tree analysis 
“top-down” approach, and a functional 
fault-mode-effects-and-analysis via “bot- 
toms-up” approach. Via this process, 
the mitigation and recovery strategy(s) 
per Fault Containment Region scope 
(width versus depth) the FP architec- 
ture. 

This work was done by Kevin Barltrop, Jeffrey 
Levison, and Edwin Kan of Caltech for' NASA’s 
Jet Propulsion Laboratory. Further informa- 
tion is contained in a TSP (seepage 1 ). 

The software used in this innovation is available 
for commercial licensing. Please contact Karina 
Edmonds of the California Institute of Technology 
at (818) 393-2827. Refer to NPO-41344. 


Ground-Based Localization 
of Mars Rovers 

The document discusses a procedure 
for localizing the Mars rovers in site 
frame, a locally defined reference frame 
on the Martian surface. MER onboard 
position within a site frame is estimated 
onboard and is based on wheel odome- 
07 . Odometry estimation of rover posi- 
tion is only reliable over relatively short 
distances assuming no wheel slip, sink- 
age, etc. As the rover traverses, its on- 
board estimate of position in the cur- 
rent site frame accumulates errors and 
will need to be corrected on occasions 
via relocalization on the ground (mis- 
sion operations). The procedure pro- 


vides a systematic process for ground 
operators to localize the rover. The 
method focuses on analysis of acquired 
images used to declare a site frame and 
images acquired post-drive. Target selec- 
tion is performed using two main steps. 
In the first step, the user identifies fea- 
tures of interest from the images used to 
declare the current site. Each of the se- 
lected target’s position in site frame is 
recorded. In the second step, post-tra- 
verse measurements of the selected fea- 
tures’ positions are recorded again, this 
time in rover frame, using images ac- 
quired post-traverse. In the third step, 
we transform the post-traverse target’s 
positions to local level frame. In the 
fourth step, we compute the delta differ- 
ences in the pre- and post-traverse tar- 
get’s position. In the fifth step, we ana- 
lyze the delta differences with 
techniques that compute their statistics 
to determine the rover’s position in the 
site frame. 

This work was done by Ashitey Trebi-Ollennu 
of Caltech for NASA’s Jet Propulsion Labo- 
ratory. 

In accordance with Public Law 96-51 7, 
the contractor has elected to retain title to this 
invention. Inquiries concerning rights for its 
commercial use should be addressed to: 
Innovative Technology Assets Management 
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Mail Stop 202-233 
4800 Oak Grove Drive 
Pasadena, CA 91109-8099 
(818) 354-2240 
E-mail: iaoffice@jpl.nasa.gov 
Refer to NPO-41 701, volume and number 
of this NASA Tech Briefs issue, and the 
page number] 
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